Card Events
CARD_ISSUED
Fired when a card is successfully issued to a cardholder.
WEBHOOK
Fires after a successful
POST /cards request once the card provider confirms the card is active and ready to use.
Event Type
Payload
Payload Fields
| Field | Type | Description |
|---|---|---|
cardId | string | The newly issued card ID (prefix crd_) |
status | string | Always ACTIVE at issuance |
cardType | string | VIRTUAL or PHYSICAL |
cardBrand | string | VISA or MASTERCARD |
cardholderId | string | The cardholder the card belongs to |
isOneTimeUse | boolean | true for single-use cards that auto-terminate after their first settled transaction |
maskedPan | string | BIN-masked PAN — first 6 digits + 6 stars + last 4 (e.g. 445123******4123) |
last4 | string | Last 4 digits of the PAN |
expirationDate | string | Card expiry in MM/YYYY format (e.g. 06/2030) |
balance | number | Card balance in USD at issuance |
currency | string | Card currency (always USD) |
is3ds | boolean | 3D Secure enabled on this card |
isTokenized | boolean | Card has been tokenised (Apple Pay / Google Pay) |
isJitfEnabled | boolean | Just-In-Time funding active |
cvv, programId, and environment are intentionally excluded from webhook payloads. The CVV is only available once in the POST /cards issuance response.Common Use Cases
- Display the new card details to the cardholder in your UI
- Record the card in your internal database linked to the cardholder
- Trigger a “Your card is ready” push notification to the cardholder
Authorizations
API key from the FYATU CaaS portal. Pass as Authorization: Bearer <key>.
Body
application/json
Response
200
Acknowledge the event.

